Privacy Policy

Last updated: February 2025

1. Introduction

MDPositions is a Shopify application published by FORTY & FREE (brand name: IDOW), a company registered in France under SIREN 925 005 753, located at 48 allée de Baceda, 59830 Bachy, France.

This Privacy Policy explains how we collect, use, and protect information when you use the MDPositions application.

2. Data We Collect

MDPositions collects and processes the following data:

• Shop information: Your Shopify shop domain, used to identify your store and manage your subscription.
• Product data: Product titles, prices, inventory levels, sales data, and other product attributes accessed via the Shopify API to perform sorting operations. This data is read in real-time and is not stored in our database.
• Collection data: Collection IDs and titles that you select for sorting. Only the Shopify IDs and titles are stored.
• Sort configuration: Your sorting rules, criteria, weights, and preferences.
• Billing information: Your subscription plan and charge ID, managed entirely through the Shopify Billing API.

3. Data We Do NOT Collect

MDPositions does not collect, store, or process:

• Customer personal data (names, emails, addresses, phone numbers)
• Order details or customer purchase history
• Payment or credit card information
• Cookies or tracking data
• Any data from your customers' browsers

We only access aggregated order count data (number of recent sales per product) via the Shopify API to calculate sales velocity for sorting. No individual order or customer data is stored.

4. How We Use Your Data

The data we collect is used exclusively to:

• Execute product sorting operations on your selected collections
• Manage your subscription plan and billing
• Provide automatic scheduled sorting via cron
• Improve and maintain the application

5. Data Storage & Security

Sort configurations and shop settings are stored in a PostgreSQL database hosted on secure servers. All communications between the app and Shopify use HTTPS encryption. We do not share, sell, or transfer your data to any third party.

6. Data Retention & Deletion

Your data is retained as long as the application is installed on your store. When you uninstall MDPositions, your session data is automatically deleted. Upon receiving a shop data erasure request from Shopify (GDPR), all associated data (sorts, configurations, tokens, plan information) is permanently deleted.

You can request complete data deletion at any time by contacting us or by uninstalling the application.

7. GDPR Compliance

As a company based in the European Union, we comply with the General Data Protection Regulation (GDPR). We implement the mandatory Shopify GDPR webhooks:

• Customer data request: We confirm that no personal customer data is stored.
• Customer data erasure: We confirm that no personal customer data needs to be erased.
• Shop data erasure: All shop-related data is permanently deleted upon request.

8. Shopify API Scopes

MDPositions requests the following Shopify API permissions:

• read_products / write_products: To read product data and reorder products in collections.
• read_orders: To calculate sales velocity (aggregated product sales count only).
• read_inventory: To read inventory levels for stock-based sorting criteria.

9. Contact

For any questions regarding this privacy policy or your data, please contact:

FORTY & FREE (IDOW)
48 allée de Baceda, 59830 Bachy, France
SIREN: 925 005 753
Email: contact@fortyandfree.fr